Hello there,
Sorry for the very late response. Lost my account details and hence became inactive.
Actually what I have in mind is much more comprehensive based on my experience with Quickbooks online edition which I have been using for nearly two years now. Based on that even the minutest change like adding a comma or a period will be recorded and the change highlighted in red text to make it easier to spot. All records for an individual user are laid out in a tree form to start with. Admin User can then select whichever raises concern.
Another area which could be improved is access control list. Applications like sql-ledger do present a table for all the modules showing the various rights to assgn to user. This provides a more granular security control. I would go a step further to include ability to create a security template to be applied to staffs.
Lastly, again an idea borrowed from Nola Pro: IP security. This allows the admin to specify specific IP addresses from which users can access the application or from which they are prohibited from accessing the application. I do appreciate it may pose a challenge for companies not using static IP but hei! you are the IT guys, you are solution finders!
You can call me paranoid about security but dont call me ordinary
lol